Description:

The Senior Application Security Engineer-I role can be performed remotely from anywhere in India.
Application Security SREs at Sumo Logic collaborate with development teams and the Security Operations Center (SOC) to ensure product security and compliance.
Responsibilities include ensuring secure application development by applying secure coding best practices and creating training materials.
The role involves performing security reviews and penetration tests during design and implementation stages, proposing solutions for any identified security deficiencies.
The engineer will lead threat modeling exercises to evaluate technical designs.
The position requires leveraging Sumo’s products and third-party tools to enhance security within the software development lifecycle.
The engineer will integrate and implement solutions to improve Sumo Logic's security posture.
Participation in security research, investigations, platform hardening, and audits is expected.
The role includes driving continual improvement and operational excellence for security tools.
On-call participation is required to provide coverage for security and platform components.

Requirements:

A B.S. or M.S. in Computer Sciences or a related discipline is required.
A passion for security is essential, with an understanding of software security vulnerabilities and best practices to defend against attackers.
An operations mindset is necessary, with knowledge of leveraging encryption, key management, monitoring, alerting, and automation for security at scale.
Candidates should have 4-6 years of professional experience in applied software security roles.
Strong knowledge of OWASP top 10 security vulnerabilities, with the ability to identify security flaws and propose solutions for developers is required.
Experience with cloud security tools as part of software architecture is necessary.
Operational expertise in high-scale, reliable 24/7, multi-tenant SaaS environments is required.
Strong coding and debugging skills are essential, with Scala experience being highly beneficial.
Security certifications, experience in bug bounty/CTFs, reported CVEs, and familiarity with compliance frameworks and audits are considered pluses.

The position offers the flexibility of remote work from anywhere in India.
Employees will have the opportunity to work with cutting-edge technology in a dynamic and innovative environment.
The role provides a chance to contribute to the security and compliance of cloud-native applications.
Employees will be part of a team that values continual improvement and operational excellence in security practices.
Sumo Logic offers a collaborative work culture that empowers employees to make impactful contributions to modern digital business.